Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account information (name, email, password)
• Search preferences and history
• Payment information for subscriptions
• Communications with our support team

2. How We Use Your Information

We use the collected information to:

• Provide and improve our award flight search service
• Process your subscription payments
• Send you important updates and notifications
• Analyze and optimize our service performance

3. Information Sharing

We do not sell your personal information. We may share your information with:

• Service providers who assist in operating our platform
• Legal authorities when required by law
• Third parties with your explicit consent

4. Data Security

We implement appropriate security measures to protect your personal information from unauthorized access, alteration, or disclosure.

5. Cookies and Tracking

We use cookies and similar technologies to enhance your experience and collect usage data to improve our service.

6. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Opt-out of marketing communications

7. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect information from children under 13.

8. Changes to Privacy Policy

We may update this privacy policy periodically. We will notify you of any material changes via email or through our platform.

9. Contact Us

If you have questions about this privacy policy, please contact us.

10. AI Processing and Providers

When you use our AI travel assistant, your messages and the relevant travel context (such as your saved balances, status and trips) are sent to large-language-model providers to generate a response. We use the following processors, who act on our instructions and under their own enterprise data terms:

• Anthropic (Claude) — large language model inference
• OpenAI — large language model inference and embeddings
• Cloudflare — AI gateway, model routing and embedding generation

11. Chat, Documents and Embeddings

To run the AI assistant we store and process:

• Your chat history with the assistant, so conversations persist between sessions
• Documents you upload (for example hotel folios), used to answer your questions
• Vector embeddings derived from your documents, used to retrieve relevant passages

We retain this data while your account is active. Deleting a document deletes the embeddings derived from it. Deleting your account deletes your chat history, your uploaded documents and all embeddings derived from them. We do not use your chat history, documents or embeddings to train AI models, and our LLM processors are instructed not to train on your data.

12. Bring Your Own Key (BYOK)

If you provide your own AI provider API key, we store it encrypted at rest. We use it only to make requests on your behalf. We never log the key, never use it for any purpose other than fulfilling your requests, and never use it or your data for model training. You can remove your key at any time.

13. Connected Accounts

If you connect third-party accounts (such as loyalty-account aggregators or award-search tools), we store the access credentials encrypted at rest and use them only to retrieve the data you've asked us to surface in the product. You can disconnect a connected account at any time, which removes its stored credentials.

14. Third-Party Tools You Connect

You can connect third-party search tools to your AI assistant. If you do, those tools may receive the travel context relevant to your request — which can include your balances, status, trips and search terms. Third-party tools are operated by their own providers under their own privacy terms, and we are not responsible for how they handle your data once it leaves our platform. We show you what a tool can access and require your explicit consent before it goes live, and you can disconnect it at any time.

15. Deleting Your Account

You can delete your account at any time from your account settings, or by contacting us. Deletion removes your personal data — including saved balances, trips, uploaded documents, chat history, embeddings, connected-account credentials and any stored API keys — and cancels any active subscription.